Method and system for policy based lifecycle management of virtual software appliances

ABSTRACT

A system and method for managing dynamically allocated resources assigned to a service includes providing a service to be used by a plurality of sites in a federation. Usage information associated with the service is communicated to each of the plurality of sites. A disposition of the service is determined based on local policies and the usage information received from other sites by a service owner. The disposition of the service is updated across a plurality of sites in accordance with messages sent by the service owner to reduce resource usage.

BACKGROUND

Technical Field

The present invention relates to distributed resource management andmore particularly to systems and methods for the lifecycle management ofdistributed resources.

Description of the Related Art

Independent hosting sites are increasingly supporting virtualization.Virtualization permits running multiple applications and operatingsystems independently on a single server. Additionally, administratorscan quickly move workloads from one virtual workspace to another. Thisassists in prioritizing application needs while maximizing serverresources. The flexibility afforded in the allocation of computingcapacity permits consolidation of applications and servers to easemanagement requirements and expenses.

The independent hosting sites can belong to different administrativedomains. These sites can optionally join a federation to access a globalstate, or they can function independently. A federation is a collectionof computers or resources that share a trusted relationship and permitinformation or resource sharing between sites in the federation. Afederation service functions as a security token service. The act ofinstalling the federation service component on a computer makes thatcomputer a federation server.

Virtual software appliances (VSA), which are templatized disk images,are created to enable fast provisioning of software stacks. VSAs can becomposed to create a solution deployed across multiple sites. VSAs areaimed to eliminate the installation, configuration and maintenance costsassociated with running complex stacks of software. A VSA is a fullypre-installed and pre-configured application and operating systemenvironment. Typically, a VSA will have a web interface to configure theinner workings of the appliance.

A query or request to be handled by accessing a federation of computersresults in a solution being determined. A federation layer can providelocation-transparency in solution delivery and enable use of globalresources. Each solution has an associated dependency graph thatmaintains the prerequisites for deploying the solution. The solutiondependency graph is stored in a service catalog.

Resources could be assigned to host VSAs used by other sites. Asresources are provisioned in response to remote/local requests for VSAs,it is critical to manage the lifecycle of these VSAs to avoid resourcewaste. The current state of the art puts the onus of lifecyclemanagement on system administrators. System administrators are expectedto coordinate across the federation to perform lifecycle management ofVSAs. Poor lifecycle management of VSAs could lead to resource waste asVSAs could be left active for solutions that are no longer in use.

With the increasing popularity of Service Oriented Architecture (SOA)based approaches for designing and deploying applications, there is aneed to manage the lifecycle of composite business applications (CBA)that are mapped across a set of resources in a distributed environment.Lifecycle management involves the process of identifying activecomponents being used by a CBA and reclaiming the resources associatedwith that component when the CBA is no longer active.

The current state of the art puts the onus of lifecycle management onsystem administrators. The system administrators are expected tocoordinate across the federation to perform lifecycle management ofCBAs. The main weakness of these approaches is that they are highlymanual and fail to take into account the usage characteristics of theCBA when making lifecycle decisions about the individual components.

In conventional approaches, the lifecycle management approach does nottake into account the inter-dependencies of software components within aCBA, and the usage characteristics of the CBA.

SUMMARY

A system and method for managing dynamically allocated resourcesincludes providing a service to be used by a plurality of sites in afederation. A rate function associated with the service at each of theplurality of sites is communicated to a service host site. A dispositionof the service is determined based on local policies and the ratefunction.

A system and method for managing dynamically allocated resourcesassigned to a service includes providing a service to be used by aplurality of sites in a federation. Usage information associated withthe service is communicated to each of the plurality of sites. Adisposition of the service is determined based on local policies and theusage information received from other sites by a service owner. Thedisposition of the service is updated across a plurality of sites inaccordance with messages sent by the service owner to reduce resourceusage.

These and other features and advantages will become apparent from thefollowing detailed description of illustrative embodiments thereof,which is to be read in connection with the accompanying drawings.

BRIEF DESCRIPTION OF DRAWINGS

The disclosure will provide details in the following description ofpreferred embodiments with reference to the following figures wherein:

FIG. 1 is a representation of a network data processing system, whichmay be used to implement an exemplary embodiment;

FIG. 2 is a block diagram of a data processing system, which may be usedto implement an exemplary embodiment;

FIG. 3 depicts a schematic representation of a service deliveryenvironment, which may be used to implement an exemplary embodiment;

FIG. 4 depicts an example of a logical application structure including aresource dependency characterization of a sample application, accordingto an exemplary embodiment;

FIG. 5 is a logical architecture of the policy manager component inaccordance with the present principles;

FIG. 6 is a diagram showing a site maintaining a life cycle of aresource including a state diagram for managing a state of a virtualsoftware appliance in accordance with one illustrative embodiment;

FIG. 7 is a block diagram showing a federation managing remote resourcesthrough interactions between policy managers in accordance with oneillustrative embodiment; and

FIG. 8 is a block/flow diagram showing a system/method for managinglifecycles of resources including composite business services inaccordance with one illustrative embodiment.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

In accordance with the present principles, a single virtual softwareappliance (VSA) or composition of VSAs in a certain topology can beconfigured to create a solution that runs in a federated environment.Each VSA that is configured and provisioned in the environment has astatic provisioning state (Internet protocol (IP) address, hostname,configuration parameters, etc.) and a runtime dynamic state, a referencecount that indicates the number of active solutions that are sharing theVSA.

A federated state management layer updates the global state with respectto a reference count (i.e., the dynamic state) of the VSA. In accordancewith the present principles, we have multiple states of the VSA and aset of well-defined state transitions employed in managing a state of aVSA or other resource using lifecycle management.

In accordance with the present principles, a Policy manager (PM) isprovided which maintains a lifecycle state of a VSA in a localconfiguration database. The PM is preferably maintained locally at eachsite, but is updated globally by communications between the sites. TheVSA has a plurality of possible states. These states may be arranged andmanaged in a transition diagram for each VSA.

The state transitions are controlled by a policy manager component thatinitiates the state transition according to specific policies associatedwith the VSA. The policies can be a function of the site to which a VSAis assigned or based on other federation or contemporaneous conditions.

As provisioning logic, running in a centralized or distributed manner,identifies and provisions a VSA at a site or deletes a VSA from a site,the state information about the VSA is updated by the particular site'sPolicy Manager (PM). The PM coordinates the management of VSAs within alocal site. Local decisions to delete a VSA are broadcast to other PMsso that their references to the VSA may be deleted and the globalreference count of the VSA can be synchronized. PM Services deployed atother sites are assigned to the corresponding PM at each site.

This results in a lifecycle management process in distributed computingenvironments that takes into account such inter-dependencies, and usagecharacteristics between sites.

Embodiments of the present invention can take the form of an entirelyhardware embodiment, an entirely software embodiment or an embodimentincluding both hardware and software elements. In a preferredembodiment, the present invention is implemented in software, whichincludes but is not limited to firmware, resident software, microcode,etc.

Furthermore, the invention can take the form of a computer programproduct accessible from a computer-usable or computer-readable mediumproviding program code for use by or in connection with a computer orany instruction execution system. For the purposes of this description,a computer-usable or computer: readable medium can be any apparatus thatmay include, store, communicate, propagate, or transport the program foruse by or in connection with the instruction execution system,apparatus, or device. The medium can be an electronic, magnetic,optical, electromagnetic, infrared, or semiconductor system (orapparatus or device) or a propagation medium. Examples of acomputer-readable medium include a semiconductor or solid state memory,magnetic tape, a removable computer diskette, a random access memory(RAM), a read-only memory (ROM), a rigid magnetic disk and an opticaldisk. Current examples of optical disks include compact disk-read onlymemory (CD-ROM), compact disk-read/write (CD-R/W) and DVD.

A data processing system suitable for storing and/or executing programcode may include at least one processor coupled directly or indirectlyto memory elements through a system bus. The memory elements can includelocal memory employed during actual execution of the program code, bulkstorage, and cache memories which provide temporary storage of at leastsome program code to reduce the number of times code is retrieved frombulk storage during execution. Input/output or I/O devices (includingbut not limited to keyboards, displays, pointing devices, etc.) may becoupled to the system either directly or through intervening I/Ocontrollers.

Network adapters may also be coupled to the system to enable the dataprocessing system to become coupled to other data processing systems orremote printers or storage devices through intervening private or publicnetworks. Modems, cable modem and Ethernet cards are just a few of thecurrently available types of network adapters.

Referring now to the drawings in which like numerals represent the sameor similar elements and initially to FIG. 1, a representation of anetwork data processing system 100, which may be used to implement anexemplary embodiment, is illustratively shown. Network data processingsystem 100 includes a network of computers, which can be implementedusing any suitable computer. Network data processing system 100 mayinclude, for example, a personal computer, workstation or mainframe.Network data processing system 100 may employ a client-server networkarchitecture in which each computer or process on the network is eithera client or a server.

Network data processing system 100 includes a network 102, which is amedium used to provide communications links between various devices andcomputers within network data processing system 100. Network 102 mayinclude a variety of connections such as wires, wireless communicationlinks, fiber optic cables, connections made through telephone and/orother communication links.

A variety of servers, clients and other devices may connect to network102. For example, a server 104 and a server 106 may be connected tonetwork 102, along with a storage unit 108 and clients 110, 112 and 114,as shown in FIG. 1. Storage unit 108 may include various types ofstorage media, such as for example, computer hard disk drives, CD-ROMdrives and/or removable media such as CDs, DVDs, USB drives, floppydisks, diskettes and/or tapes. Clients 110, 112 and 114 may be, forexample, personal computers and/or network computers.

Client 110 may be a personal computer. Client 110 may comprise a systemunit that includes a processing unit and a memory device, a videodisplay terminal, a keyboard, storage devices, such as floppy drives andother types of permanent or removable storage media, and a pointingdevice such as a mouse. Additional input devices may be included withclient 110, such as for example, a joystick, touchpad, touchscreen,trackball, microphone, and the like.

Clients 110, 112 and 114 may be clients to server 104, for example.Server 104 may provide data, such as boot files, operating systemimages, and applications to clients 110, 112 and 114. Network dataprocessing system 100 may include other devices not shown.

Network data processing system 100 may comprise the Internet withnetwork 102 representing a worldwide collection of networks and gatewaysthat employ the Transmission Control Protocol/Internet Protocol (TCP/IP)suite of protocols to communicate with one another. The Internetincludes a backbone of high-speed data communication lines between majornodes or host computers including a multitude of commercial,governmental, educational and other computer systems that route data andmessages.

Network data processing system 100 may be implemented as any suitabletype of network, such as for example, an intranet, a local area network(LAN) and/or a wide area network (WAN). FIG. 1 is intended as anexample, and not as an architectural limitation for the presentembodiments.

Referring to FIG. 2, a block diagram of a data processing system 200,which may be used to implement an exemplary embodiment is illustrativelyshown. Data processing system 200 is an example of a computer, such asserver 104 or client 110 of FIG. 1, in which computer usable code orinstructions implementing processes may be located.

In the depicted example, data processing system 200 employs a hubarchitecture including a north bridge and memory controller hub (NB/MCH)202 and a south bridge and input/output (I/O) controller hub (SB/ICH)204. Processing unit 206 that includes one or more processors, mainmemory 208, and graphics processor 210 are coupled to the north bridgeand memory controller hub 202. Graphics processor 210 may be coupled tothe NB/MCH 202 through an accelerated graphics port (AGP). Dataprocessing system 200 may be, for example, a symmetric multiprocessor(SMP) system including a plurality of processors in processing unit 206.Data processing system 200 may be a single processor system.

In the depicted example, local area network (LAN) adapter 212 is coupledto south bridge and I/O controller hub 204. Audio adapter 216, keyboardand mouse adapter 220, modem 222, read only memory (ROM) 224, universalserial bus (USB) ports and other communications ports 232, and PCI/PCIe(PCI Express) devices 234 are coupled to south bridge and I/O controllerhub 204 through bus 238, and hard disk drive (HDD) 226 and CD-ROM drive230 are coupled to south bridge and I/O controller hub 204 through bus240.

Examples of PCI/PCIe devices include Ethernet adapters, add-in cards,and PC cards for notebook computers. In general, PCI uses a card buscontroller while PCIe does not. ROM 224 may be, for example, a flashbinary input/output system (BIOS). Hard disk drive 226 and CD-ROM drive230 may use, for example, an integrated drive electronics (IDE) orserial advanced technology attachment (SATA) interface. A super I/O(SIO) device 236 may be coupled to south bridge and I/O controller hub204.

An operating system, which may run on processing unit 206, coordinatesand provides control of various components within data processing system200. For example, the operating system may be a commercially availableoperating system such as Microsoft® Windows® XP (Microsoft and Windowsare trademarks or registered trademarks of Microsoft Corporation). Anobject-oriented programming system, such as the Java™ programmingsystem, may run in conjunction with the operating system and providescalls to the operating system from Java programs or applicationsexecuting on data processing system 200 (Java and all Java-based marksare trademarks or registered trademarks of Sun Microsystems, Inc.).

Instructions for the operating system, object-oriented programmingsystem, applications and/or programs of instructions are located onstorage devices, such as for example, hard disk drive 226, and may beloaded into main memory 208 for execution by processing unit 206.Processes of exemplary embodiments may be performed by processing unit206 using computer usable program code, which may be located in amemory, such as for example, main memory 208, read only memory 224 or inone or more peripheral devices.

It will be appreciated that the hardware depicted in FIGS. 1 and 2 mayvary depending on the implementation. Other internal hardware orperipheral devices, such as flash memory, equivalent non-volatilememory, or optical disk drives and the like, may be used in addition toor in place of the depicted hardware. Processes of embodiments of thepresent invention may be applied to a multiprocessor data processingsystem.

Data processing system 200 may take various forms. For example, dataprocessing system 200 may be a tablet computer, laptop computer, ortelephone device. Data processing system 200 may be, for example, apersonal digital assistant (PDA), which may be configured with flashmemory to provide non-volatile memory for storing operating system filesand/or user-generated data. A bus system within data processing system200 may include one or more buses, such as a system bus, an I/O bus andPCI bus. It is to be understood that the bus system may be implementedusing any type of communications fabric or architecture that providesfor a transfer of data between different components or devices coupledto the fabric or architecture. A communications unit may include one ormore devices used to transmit and receive data, such as modem 222 ornetwork adapter 212. A memory may be, for example, main memory 208, ROM224 or a cache such as found in north bridge and memory controller hub202. A processing unit 206 may include one or more processors or CPUs.

Methods for automated provisioning according to exemplary embodimentsmay be performed in a data processing system such as data processingsystem 100 shown in FIG. 1 or data processing system 200 shown in FIG.2.

It is to be understood that a program storage device can be any mediumthat can contain, store, communicate, propagate or transport a programof instructions for use by or in connection with an instructionexecution system, apparatus or device. The medium can be, for example,an electronic, magnetic, optical, electromagnetic, infrared, orsemiconductor system (or apparatus or device) or a propagation medium.Examples of a program storage device include a semiconductor or solidstate memory, magnetic tape, removable computer diskettes, RAM (randomaccess memory), ROM (read-only memory), rigid magnetic disks, andoptical disks such as a CD-ROM, CD-R/W and DVD.

A data processing system suitable for storing and/or executing a programof instructions may include one or more processors coupled directly orindirectly to memory elements through a system bus. The memory elementscan include local memory employed during actual execution of the programcode, bulk storage, and cache memories that provide temporary storage ofat least some program code to reduce the number of times code must beretrieved from bulk storage during execution.

Data processing system 200 may include input/output (I/O) devices, suchas for example, keyboards, displays and pointing devices, which can becoupled to the system either directly or through intervening I/Ocontrollers. Network adapters may also be coupled to the system toenable the data processing system to become coupled to other dataprocessing systems or remote printers or storage devices throughintervening private or public networks. Network adapters include, butare not limited to, modems, cable modem and Ethernet cards.

Referring to FIG. 3, a schematic representation of a service deliveryenvironment 300, which may be used to implement an exemplary embodimentis illustratively shown. Service delivery environment 300 includes afarm of physical servers 302, DMZ (demilitarized zone) 306 andmanagement servers 312. The term “demilitarized zone” or acronym “DMZ”refers to a network area that sits between an organization's internalnetwork and an external network, such as the Internet.

User requests from the Internet or an intranet are received by a routerdevice. For example, a router device may be located within the DMZ 306.The router device may be implemented by a reverse proxy, such as IBM'sWebSeal product. User requests may be directed via a network 308 to aprovisioning solution that is hosted on a collection of real or virtualmachines 310 running on a server farm 302. Management servers 312 may beused to manage the server farm 302 and are coupled via network 308 tothe physical servers 310 of farm 302. The management servers 312 may beused by system administrators 304 to manage and monitor the server farm302. Software running on the management servers 312 may assist withvarious tasks such as software metering, application provisioning,monitoring all (or selected) applications, and problem determination ofthe server farm.

Referring to FIG. 4, an example of a logical application structure 400including a resource dependency characterization (dependency graph) of asample application, according to an exemplary embodiment. The examplelogical application structure 400 is a dependency graph includingresource dependency characteristics of the sample application. However,it is to be understood that any suitable logical application structuremay be employed.

A dependency graph may be expressed as an XML file that highlights therelationships and dependencies between different components. In theexample depicted in FIG. 4, a “Loan Solution” 422 depends on theavailability of three components, WebSphere Portal Server 424, WebSphereProcess Server 430 and DB2 server 434. The WebSphere Portal Server 424depends on the availability of WebSphere Application Server 426 and DB2client 428. The WebSphere Process Server depends upon DB2 client 432 andWebSphere Application Server 436. Another application “Solution XYZ” 438has a dependency on WebSphere Portal Server 424, and may share acomponent instance of the WebSphere Portal with the “Loan solution” 422.The solution dependency graph 400 may be distributed across servers andsites, and indicates the sharing relationships and dependencies ofsolutions. As such VSAs may also be distributed across servers and sitesas well.

Referring to FIG. 5, a logical architecture 500 of a Policy Managercomponent 502 is illustratively shown. The architecture 500 includes aSolution repository 504 and a Deployment repository 506. The Solutionrepository 504 includes metadata and dependency graphs for eachcomposite business solution (CBS). The terms CBS and CBA are usedinterchangeably herein. The Deployment repository 506 includes the stateof each virtual software appliance (VSA) that is present in the serverfarm (302), and images of the deactivated appliances. A VSA is a diskimage of an application or part of an application (component) and itsmiddleware stack running in a virtualized environment. A VSA can bearchived and restarted on any other physical server running the samevirtualization environment given other dependencies and resources aremet.

The Policy manager 502 uses a Provisioning Manager 508 to perform anytask on the VSAs. A CBA can be composed of multiple VSAs, say one foreach component of the application. A same VSA image can be shared acrossCBAs. Even active VSAs can be shared across CBAs if the VSAs aremulti-tenant.

Referring to FIG. 6, states and state transitions of the VSAs areillustratively shown. A Policy manager (PM) 502 is illustratively shownin the form of a lifecycle state and transition diagram, and policies632 for managing the lifecycle of a virtual software appliance (VSA) ata particular site are also depicted. The PM 502 maintains lifecyclestates (e.g., active, inactive, passive, provisioning, etc.) of thevirtual software appliance (VSA) in a local configuration database ormemory location. The PM 502 is preferably maintained locally at a sitein a system or federation that includes a plurality of sites. It shouldbe understood that the PM will be described in terms of a VSA, but othershared resources (hardware device and/or services) may also benefit fromthe dynamic management methods disclosed herein.

The VSA has a plurality of possible states, e.g., an active state 608,an inactive state 602, a passive state 606, and a provisioning state604, which are illustratively depicted. These states may be arranged andmanaged by a local PM. State transitions, e.g., new request 610,uninstall 612, completed 614, deactivate 616 and activate 618, arecontrolled by the policy manager 502 that initiates the statetransitions according to specific policies 632 associated with the VSA.The policies 632 can be a function of the site to which a VSA isassigned or based on other federation or contemporaneous conditions.

Provisioning logic (not shown) handles the implementation of thepolicies 632 for state transitions. The logic may be disposed in acentralized manner or in a distributed manner, and may include softwareor hardware. The logic identifies and provisions a VSA at a site ordeletes a VSA from a site. The state information about the VSA isupdated by the particular site's Policy Manager (PM) 502. The PM 502coordinates the management of VSAs within the local site. Localdecisions to delete a VSA are broadcast to other PMs so that theirreferences to the service represented by the deleted VSA may be deletedand a global reference count of the VSA is synchronized. The globalreference count may be any measure or usage or status of a distributedresource. For simplicity, the global reference as described in theillustrative example here may include a number of solutions in aparticular state for a given VSA.

At the time of deployment, each root service (e.g., a composite businessservice or solution (CBS)) is assigned to a policy manager for managinga given service. Services deployed at other sites are assigned acorresponding PM at each site.

A single VSA or composition of VSAs in a certain topology can beconfigured to create a solution that runs in a federated environment.Each VSA that is configured and provisioned in the environment has astatic provisioning state (IP address, hostname, configurationparameters, etc.) and a runtime dynamic state. The reference countindicates the number of active solutions that are sharing the state. Afederated state management layer updates the global state with respectto the reference count of a VSA. The VSA advantageously can havemultiple states, and a set of well-defined state transitions.

Each site maintains the lifecycle state of the VSA in the localconfiguration. The lifecycle state transitions may include the followingexample policies 632.

Inactive to Provisioning: The policy manager 502 determines the type ofresources that should be allocated to the VSA based on the site/servicethat triggered provisioning 604.

Passive to Active: The policy manager 502 may decide to reactivate apassive application container if the passive container can satisfytransient needs of an application. For example, suppose the applicationcontainer uses a new data base container or the application containercan reuse an existing VSA that is in a deactivated state. The new theapplication container will fit better in terms of performance, but thedeactivated one can be brought online faster though it is not the bestfit. If time is of the essence here, the policy manager 130 may choosethe older one and take the risk on performance.

Active to Passive: Any resource that shows inactivity for a predefinedperiod (e.g., 7 days) is deactivated and put in the passive state 606.This transition may be triggered if a free resource pool is running low.

Passive to Inactive: This policy transition may be implemented if apredefined period of no use has elapsed, if the free resource pool isrunning low, etc.

The states for the VSA will now be described in greater detail.

Inactive state (602): The initial state of a resource (VSA) is markedinactive when it resides only as an entry in a service catalog withappropriate image and meta-data, or an image template ready forconfiguration and deployment. No resources are allocated in the inactivestate.

Passive state (606): In the passive state, the runtime state is checkpointed on persistent storage. Deactivation may include calling anyspecific quiescent operation for the software layers in the VSA. In thisstate, memory and CPU resources are reclaimed and snapshot storage isallocated. While in the passive state, the local PM also decrements thereference count for a VSA if the VSA has been in the passive state for apredetermined number of days or some other set amount of time.

Provisioning state 604: As requests to provision a new VSA are receivedby the site, the PM marks the state of the resource to provisioning(604), and then active (608), and increments the reference count for theVSA.

Active state 608: The active state means that the VSA is currentlyactive. Additional active states or passive states are also possible ifthe VSA is moved to a different server or site based on hosting ‘cost’,e.g., it may be moved to a cheaper, low performance server or archivedon cheaper, high latency storage.

VSA uninstall 612 transition: When an administrator removes or“uninstalls” a solution from service or a reference count of a VSA fallsto 0, the PM also updates the clean up of associated VSAs bydecrementing the reference count on each associated VSA. If the VSA ismanaged by a remote site then a request is sent to the Policy manager atthe remote site.

Deactivate transition 616: This transition is usage based, the PMperiodically monitors the usage of the resource by querying a monitoringservice. Any resource that shows inactivity for a predefined period(e.g., 7 days) is “deactivated” and put in the passive state 606.

Activate transition 618: Passive VSAs can be activated if a new request110 is received for that VSA. The new request is a result of a newprovisioning request for a service represented by the VSA.

Completed transition 614: When a new VSA has been provisioned and movesto the active state 608. The provisioning state 604 has completed 614.

Inactive 602 is the initial state. The initial state of a resource ismarked inactive when it resides only as an entry in the service catalogwith appropriate image and meta-data or image template ready forconfiguration and deployment. No resources are allocated to the VSA. Asrequests to provision a new VSA are received by the site, the PolicyManager 502 marks the state of the resource to provisioning 604 and thenactive 608, and increments the reference count for the VSA.

When an administrator removes a solution from service or reference countof a VSA falls to 0, the Policy Manager 502 also updates the clean up ofassociated VSAs by decrementing the reference count on each associatedVSA. If the VSA is being used by CBAs located at a remote site then arequest is sent to the Policy manager 502 at the remote site. The Policymanager 502 may deactivate a VSA based on usage profile. The Policymanager 502 periodically monitors the usage of the resource by queryingthe monitoring service. Any resource that shows inactivity for apredefined period (say, e.g., 7 days) is deactivated and put in passivestate 606. Passive VSAs can be activated if a new request 610 isreceived for that VSA. In the passive state 606, a runtime state ischeckpointed on persistent storage. Deactivation 616 may include callingany specific quiesce operation for the software layers in the VSA, e.g.,memory and CPU resources reclaimed, snapshot storage allocated, etc.

While in the passive state 606, the Policy manager 502 also decrementsthe reference count for a VSA if the VSA has been in passive for apredetermined number of days, and transitions the state to inactive 602.Additional active states or passive states are also possible if the VSAis moved to a different server or site based on hosting ‘cost’, e.g., itmay be moved to a cheaper, low performance server or archived oncheaper, high latency storage.

Referring to FIG. 7, a communication pattern between Policy managers 730located in a distributed environment is illustratively shown. Afederation 700 of sites (sites 1-4) and servers (S1-S8) areillustratively depicted to demonstrate interactions among components ofthe federation. When an administrator selects a composite businessservice (CBS) such as CBS_1 or CBS_2 for deletion or deactivation, apolicy manager 730, associated with the site (e.g., sites 1-4) where theCBS is deployed, determines the set of remote services that the CBSuses. For example, a CBS_1 on site 1 uses servers S1 and S2 on site 2 inits set of remote services.

For each remote CBS, each remote policy manager 730 that no longer needsthat particular service sends a notification to an owning policy managerfor that site indicating that the component service is no longer needed.The policy manager 730 also sends to the owning policy manage a ratefunction 740 that is derived by profiling long term behavior of thecomponent usage. For example, if CBS_1 is no longer needed by site 2.The policy manager 730 of site 2 sends a notification and usageinformation to the policy manager 730 at site 1.

If CBS_1 is being considered for deletion, policy managers 730 at sites2, 3 and 4 send notification messages to the policy manager 730 of site1 (the owning policy manager) that the service is no longer needed bytheir site and/or usage information for that the policy manager of site1 can make a state decision. Further, a command rate function 740 issent to the policy manager 730 at site 1 from the policy managers 730 ofsites 2, 3 and 4.

Each owning policy manager 730 receives the rate function 740 for thecomponent service and uses the function 740 to determine the dispositionof the service based on the VSA lifecycle and local policies. Thecommand rate function is a mathematical representation of the usagepattern of the service. It could be a function and not just a scalarrate value (service calls/time), for example if one wants to representtime-varying usage, day-night/seasonal/hourly patterns, callerlocation-based patterns, etc.

For shared components, the rate functions 740 are received from multiplecallee policy managers 730 and are aggregated to make a decision as towhether the service should be deactivated or whether a state should bechanged for that component.

Site 1 has a composite business application/service CBS_1, and componentS1. Site 2 has components S2 and S3 that are invoked by CBS_1 (as shownby solid arrows). Site 3 has a CBS_2 and components S4 and S5. Site 4has two components S7 and S8. Note that component S3 is shared betweenapplications CBS_1 and CBS_2, and components S7 and S8 are bothindirectly shared via component S3. The Policy managers 730 at the foursites communicate lifecycle management messages as depicted by dashedarrows. The message includes a command and a rate function.

The message structure 740 includes commands (e.g., delete, deactivate,etc. and a rate function (e.g., usage data). Based on the disposition ofthe caller components or CBA, the command could either be delete ordeactivate. The rate function represents usage data for each service atlocal level and exchange this info (say, calls/minute, active usage/min,etc.), and this can be exchanged also for aggregation across sites.

For example, the rate function of a component at a site may capture howthe calls/minute to the component varies throughout the day or thedistribution of the parameter for each site the rate function isemployed at. The individual functions can then be aggregated at thelocal policy manager of the component to determine overall usage for theday or the aggregate distribution. This can be used to determine at sometime t, if the component should be put in some lower state of activityjust because it is not used at time t. E.g., if we expect heavy activitythroughout the day based on the aggregate rate function we may choose tokeep the component in the active state.

Referring to FIG. 8, a system/method for managing dynamically allocatedresources is illustratively depicted. In block 802, a service isprovided to be used by a plurality of sites in a federation. The servicemay include a composite business service (CBS), a virtual softwareappliance, etc.

In block 810, a command, rate or count information, such as a ratefunction or historic usage information associated with the service ateach of the plurality of sites is communicated to a host site. Thecommand, rate function or other information is preferably communicatedbetween policy managers of sites using the service and a policy managerof a site hosting the service.

In block 816, a disposition of the service is determined based on localpolicies, commands and the rate function. In block 818, the dispositionof the service is maintained and updated based upon a Policy managerassigned to the service. The Policy manager maintains a plurality ofstates such that the disposition is a state determined in accordancewith the local policies, commands and the rate functions from othersites employing the service. For example, the states may include one ormore of active, inactive, provisioning, passive, etc.

In block 820, transitioning between the states is permitted by employingpolicy triggered transitions and commands. The policy triggeredtransitions may include one or more of activate, deactivate, newrequest, completed, uninstall, etc. The transitions may be activated byperforming attribute matches based upon the most current attributes andthe attribute thresholds or levels as dictated by the policies. If theattribute matching indicates that a transition is needed, the transitionto a new state is triggered.

Having described preferred embodiments of a system and method for policybased lifecycle management of virtual software appliances (which areintended to be illustrative and not limiting), it is noted thatmodifications and variations can be made by persons skilled in the artin light of the above teachings. It is therefore to be understood thatchanges may be made in the particular embodiments disclosed which arewithin the scope and spirit of the invention as outlined by the appendedclaims. Having thus described aspects of the invention, with the detailsand particularity required by the patent laws, what is claimed anddesired protected by Letters Patent is set forth in the appended claims.

What is claimed is:
 1. A method for managing dynamically allocatedresources assigned to a service, comprising: communicating service usageinformation to a service owner located at one or more sites in afederation; determining a disposition of the service based on localpolicies and the usage information received from other sites by theservice owner; and managing the disposition of the service through itslifecycle across the plurality of sites, the managing includingmaintaining a lifecycle state of the service locally and updating thelifecycle state globally by communication between the sites.
 2. Themethod as recited in claim 1, wherein the service includes a compositebusiness service.
 3. The method as recited in claim 1, furthercomprising maintaining and updating the disposition of the service basedupon a Policy manager assigned to the service as the service owner. 4.The method as recited in claim 3, wherein the Policy manager furthercomprises a plurality of states such that the state is determined inaccordance with the local policies and the usage information from othersites employing the service.
 5. The method as recited in claim 4,wherein the service includes a virtual software appliance and the statesinclude one or more of active, inactive, provisioning and passive. 6.The method as recited in claim 4, further comprising transitioningbetween the states by employing policy triggered transitions.
 7. Themethod as recited in claim 4, wherein the policy triggered transitionsinclude one or more of activate, deactivate, and uninstall.
 8. Themethod as recited in claim 1, wherein communicating includescommunicating a rate function between policy managers of sites using theservice and a Policy manager of the service owner.
 9. A non-transitorycomputer-readable storage medium comprising a computer readable programfor managing dynamically allocated resources assigned to a service,wherein the computer readable program when executed on a computer causesthe computer to perfoim the steps of: communicating service usage info′nation to a service owner located at one or more sites in a federation;determining a disposition of the service based on local policies and theusage information received from other sites by the service owner; andmanaging the disposition of the service through its lifecycle across theplurality of sites, the managing including maintaining a lifecycle stateof the service locally and updating the lifecycle state globally bycommunication between the sites.
 10. The computer-readable medium asrecited in claim 9, wherein the service includes a composite businessservice.
 11. The computer-readable medium as recited in claim 9, furthercomprising maintaining and updating the disposition of the service basedupon a Policy manager assigned to the service as the service owner. 12.The computer-readable medium as recited in claim 11, wherein the Policymanager further comprises a plurality of states such that the state isdetermined in accordance with the local policies and the usageinformation from other sites employing the service.
 13. Thecomputer-readable medium as recited in claim 12, wherein the serviceincludes a virtual software appliance and the states include one or moreof active, inactive, provisioning and passive.
 14. A system for managingthe dynamic allocated resources, comprising: a Policy manager,implemented by a processor, disposed at each site of a plurality ofsites in a federation, and being configured to: communicate serviceusage information to one or more service owners located at one or moresites in the federation; determine a disposition of the service based onlocal policies and the usage information received from other sites bythe service owner; and manage the disposition of the service through itslifecycle across the plurality of sites, the managing includingmaintaining a lifecycle state of the service locally and updating thelifecycle state globally by communication between the sites.
 15. Thesystem as recited in claim 14, wherein the service includes a compositebusiness service.
 16. The system as recited in claim 14, wherein thePolicy manager comprises a plurality of states such that the dispositionincludes a state determined in accordance with the local policies andthe usage information.
 17. The system as recited in claim 16, whereinthe service includes a virtual software appliance and the states includeone or more of active, inactive, provisioning and passive.
 18. Thesystem as recited in claim 16, further comprising policy triggeredtransitions of the state.
 19. The system as recited in claim 14, whereinthe usage information is communicated between policy managers of sitesusing the service and a policy manager of the at least one host site.20. The system as recited in claim 14, wherein the usage informationincludes a rate function.